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packet networks (to bypass GSM Memorandum of 
Understandings) for cellular/PCS services so that GSM 
subscribers roaming into CDMA networks can be provided 
with basic call delivery cellular services as long as the 
roamers can pay the bill with their valid credit card. This is 
achieved by integrating wireless and wireline networks as 
well as circuit and packet networks, using IP networks and 
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1 2 

DELIVERING CALLS TO GSM databases to effect the requested LNP. Note that LNP is 

SUBSCRIBERS ROAMING TO CDMA designed to support occasional change of location/re- 

NETWORKS VIA IP TUNNELS location, and is typically done manually; thus, there is a 

scalability issue in practice. 
S Public Switched Telephony Network (PSTN) refers to the 

RELAlTiD APPLICATIONS public phone networks as we know them. PSTN is com- 

Not Applicable posed of switches and Tl/El trunks, central ofSce, etc. 

PSTN uses circuit-switched technology, in which necessary 

FEDERALLY SPONSORED RESEARCH OR resources are allocated (dedicated) for the duration of a 

DEVELOPMENT "^^ phone call. An IP network (e.g., the Internet), in contrast, is 

composed of nodes of computers, serves, routers, and com- 

Not Applicable. munications links, etc. It employs packet-switching technol- 
ogy that decomposes data (e.g., voice, web pages, an e-mail 

BACKGROUND OF THE INVENTION message) into IP packets. Each packet is then transmitted 

This invention relates to cellular call deUvery services ^^^^ network to a destination identified by an IP 

provided by cellular/PCS operators. CaU delivery service ^^^'^^ reassembled at the destmation. An IP transmis- 

permits a cellular subscriber to receive phone calls either in ^^J" completed without pre-allocating resources from 

a home network (e.g., London) or while away from the home pomt to pomt. 

network (e.g., in Chicago). H.323 is a (long) list of standards that supports "voice 
Global Systems for Mobile Communications (GSM) is a Intemet-(or voice over IP) and multimedia over Inter- 
widely popular Time Division Multiple Access (TDMA)- ^ ^^^^ disclosure, the URL http:H/ 
based standard used in Europe, China, selected parts of the www.databeam.com has further information on the H.323 
United States, and other parts of the world. TDMA is a standards. H.323^ased packet calls can bypass some por- 
digital wireless technology. ^ tion of telephony mfrastructure, but H.323 does not provide 
, . ^ . T^- • • 1 for mobility and radio resource usage is inefficient if IP 
A subscnber who roams to Code Division Multiple , , - , j- i- r 
/^T^^ r 4 \ . 1 1 t . . 1 ti t packets are carried over the radio link. 
Access (CDMA) wireless networks may be demed cellular . . 
services even if the subscriber's mobile device is capable of ^'^^ ^ descnbed by Internet Engineenng Task Force 
dual-mode (CDMA or analog, and GSM) operation, and the P^TF) Request for Comments (RFC) number 2002. As of 
subscriber has the ability to pay for ceUular calls with his/her 30 ^^^^ °^ dusclosure, RFC 2002 may be obtained from 
valid credit card. The basis for the denial of service is simply hltp://nic.mil/ftp/rfc/rfc2002.txt. Unlike H.323, 
because there is no pre-existing relationship between the ^""^'^t ^^^^ ^^VPori packet mobility, but smooth 
home GSM network and visited CDMA networic for billing handoffs^as smooth as circuit cellular voice— are not sup- 
settlement. P^''^^'^- 

1 Field of the Invention ^5 known commercial use of Mobile IP is deployed by 

rr^. . , . . 1, , . 1 . r Nextel, a wireless service provider. Using a cellular mobile 

This invention relates to cellular telephony and the use of , Lxjr* lo ^cu u m j 

. ^j... ifiL -r. phone by Motorola Corporation of Schaumburg, lU., under 

Internet Protocol to replace traditional telephony mfrastnic- f, , / rM-^r i rn^n kt * i n u u * 

- / rx.. . . f / , the tradename iDEN 1000, Nextel allows subscribers to 

toe for roaming cellular users. Thrs uDvenUoQ also relates to ^^^^ ^^^^ ^^^^ j^^^^^^, ^.^ ^^^ij^ ,p 

the field of providing mobile wireless telephone service for 

users roaming outside their own predefined service area. ^h^ Diffie-Hellman algorithm is a math method allowing 
This invention also relates to the field of interoperability of T?^^^^^ t° establish a temporary secret for secure trans- 
CDMA and GSM/TDMA cellular networks. "^^^i^" information. Reference: Diffie, W. and Hellman, 
^ • • r r^ ^ J A M., "New directions in cryptography," IEEE Transactions 
2. Description of Related Art . ™ rV'f-i kt u 

^ on Information Theory, Vol. IT-22, November 1976, pp. 

A GSM MoU is an agreement between a consortium of 644_554^ 
GSM wireless service providers. For example, a subscriber 

of a first GSM service provider may roam to a service area BRIEF SUMMARY OF THE INVENTION 

controlled by a second GSM service provider. An estab- . ^ • i-^ -.r 

lished MoU allows the Hrst GSM service provider to sdU T^^'^. ^<^^'^^^^. ^bove issues of denial of 

serve the subscriber while that subscriber is in the service 50 ^l^^^uT^A^t '"'"Sratrng the proper pieces of 

area corresponding to the second GSM service provider. In '° ^""^ P''^^^'' ^^'^Iff, 1^,7''"^^:^'' 

practice, the second GSM scmce provider gets paid a invenUon provides a way to bypass GSM MoU and PSWs^ 

portion of the service/roaming charge the first GSM service user roaming into CDMA networks, having the 

provider charges the subscriber, which is one reason wireless '^'^'^ '° P»y '^^Mar caUs with his/her credit card, can be 

"roaming charges" are so expensive. „ Py^^^'*"' ^^^"^'y """^ 

J J Vice -versa 

Alternatively, a Local Number Portability (LNP) feature * , , r . 

could be used. LNP allows a telephone subscriber to "port" These and other aspecte and attnbutes of the present 

his/her phone number when that subscriber relocates to a invention will be discussed with reference to the foUowmg 

different region of the country, even when the local area code drawings and accompanying specificaUon. 

may be different (e.g., a subscriber may reallocate firom 60 BRIEF DESCRIPTION OF THE DRAWINGS 
Chicago to New York, but still keep the original phone 

number used in Chicago that has an area code of 312). FIG. 1 represents prior art, the typical infrastructure 

However, LNP updates are not dynamic by design and supporting call originadon and call delivery; 

thus can have serious limitations. A subscriber who wants FIG. 2 represents an infrastructure supporting the first 

LNP typically will request that service by filUng out a form. 65 step of call delivery in the present invention; 

The phone company's administrative staff will manually FIG. 3 represents an infrastructure supporting the second 

process the form and make necessary updates of various step of call delivery in the present invention; 
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FIG. 4 represents an infrastructure supporting the third 
step of call delivery in the present invention; 

FIG. 5 illustrates a data structure supporting a mapping 
operation of the present invention in the visited wireless 
network; 

FIG. 6 illustrates data structures in the user*s mobile 
device utilized by the present invention; 

FIG. 7 illustrates a data structure supporting a mapping 
operation of the present invention in the voice and data 
service provider's network; and 

FIG, 8 illustrates the bypass function of the Mobile IP 
tunnel of the present invention. 

DETAILED DESCRIPTION OF THE 
PREFERRED EMBODIMENT 



4 

TABLE 1 



Cellular V^lue 
Propositioa 



Cunent Supporting Cellular/PCS Technologies 



10 



15 



Wireless and Base stations, RF engineering, hard and soft handofifs 
mobility 

Wide Coverage Automatic roaming across visited & home 
Area wireless networks using VLR/HLR/AC 

US: ANSI-41 and business roaming agreements 
GSM: GSM MAP and GSM Memorandum 
of Understandings 

Reliable Call origination: involves VLR, HLR, and AC for service 

services of both qualification, user service profile, and billing, 

voice/data Call delivery: involves VLR and HLR for 

call origination mobile location tracking, 

voice/data Tfemporary Local Directory Number (TLDN) 

call delivery assignment, call forwarding/routing, and billing. 



While this invention is susceptible of embodiment in 
many different forms, there is shown in the drawings, and 
will be described herein in detail, specific embodiments 
thereof with the understanding that the present disclosure is 
to be considered as an exemplification of the principles of 
the invention and is not intended to limit the invention to the 
specific embodiments illustrated. 

25 

Cellular telephone users generally subscribe to a wireless 
service provider The subscriber may use their mobile 
devices within the home wireless network served by their 
wireless service provider in exchange for subscription fees. 
However, users also may travel, and thus need to have their 
mobile devices operate outside of their home wireless net- 
works as they visit other areas. 

FIG. 1 shows a typical wireless infrastructure that pro- 
vides cellular/PCS services like call origination and call 
delivery for a roaming mobile device. For call delivery, the 35 
visited network 100 tracks the location of a roaming user and 
the Visitors Location Register (VLR) 120 reports that loca- 
tion information via a control network to the Home Location 
Register (HLR) 160 of the home network 150. Control 
networks may include ANSI-41 and GSM MAP types of 40 
networks. An Authentication Center (AC) 170 in the home 
network 150 is used for user registration and authentication, 
e.g., checking to see, among other things, if the user has 
made payments. When a call 165 relayed from the Public 
Switched Telephony Network (PSTN) 180 to the home MSC 45 
149 is to be delivered to a subscriber, the home Mobile 
Switching Center (MSC) 149 consults the HLR 160 to 
determine the current whereabouts of the current VLR 120, 
and the call is then directed via links 167; and the PSTN 180 
to the visited Mobile Switching Center (MSC) 110 cunently 50 
serving the mobile device. 

A MSC is a telephone switch specialized for wireless and 
mobility support. A MSC performs various functions, 
including mobility management, call handoffs, caU 
admission, call control, resource allocation, and so forth, 
The call is then relayed from the MSC 110 to base stations 
105 and via wireless communications 143 to the mobile 
device 140. 

Since the visited network 100 and home network 150 may 
be operated by different wireless operators, certain kinds of 
business roaming agreements arc necessary for things like 
billing settlement. In GSM networks, a GSM Memorandum 
of Understanding (MoU) serves that purpose. 

Table 1 summarizes the current cellular/PCS technologies 65 
and the network elements that are involved in call origina- 
tion and call delivery. 



A problem occurs when a GSM user, who roams to a 
CDMA (or TDMA) network, may not be provided with 
cellular services because there lacks a GSM Memorandum 
of Understandings (MoU) between the home GSM network 
and visited CDMAnetwork. This is so even when the user's 
mobile device is capable of dual-mode (CDMA or analog, 
and GSM) operation and there is no technology barrier, and 
the user has the ability to pay for cellular calls (e.g., call 
delivery) with his/her valid credit card. 

The present invention combines the following technical 
components to. bypass GSM MoU and PSTN for call deliv- 
ery: (1) use of Mobile IP to track the location of mobile 
users; (2) use of H.323-based voice-over-IP to transport 
packet voice over Mobile IP tunnels; (3) use of H.323 
servers in the visited network to convert packet voice to 
circuit voice; (4) use of the user's credit card as a payment 
method; and (5) use of the DifiBe-Hellman algorithm to 
encrypt the user's credit card information for over-the-air 
transmission. 

The use of H.323 servers in the visited network to convert 
packet voice to circuit 15 voice leverages the existing 
smooth handoffe capability of circuit cellular voice and the 
well-engineered CDMA/TDMA circuit-mode air interface 
that provides superior efficiency of radio resource usage. 
The conversion also allows the roamer to receive call 
delivery with an existing mobile device as opposed to 
having to purchase a new kind of "packet phone." 

Many of the same reference numbers are used in FIGS. 2 
through 8 to identify common features. It is to be understood 
that where the same number is used, it refers to the same 
feature in each of the drawings. 

FIG. 2 shows the first step of call delivery, in one 
embodiment of the present invention, wherein prior to 
roaming, the mobile device 240 sets up call forwarding from 
the home wireless network 250 to a voice and data service 
provider's network 252. The voice and data service provider 
can be an Intemet service provider (ISP). The voice and data 
service provider's network 252 comprises at least a Home 
H.323 server 251 that provides a telephone number 242 to 
the user's mobile device 240 for call forwarding. The Home 
H.323 server 251 also acts as Mobile IP home agent (HA) 
and provisions a Mobile IP shared secret 243 and the IP 
address 244 of the HA into the user's mobile device 240. 

Note that the provisioning of the Mobile IP shared secret 
243 can not be done via wireless communication 256 with 
base stations 255, because the Mobile IP shared secret will 
be revealed during such a transmission and will no longer be 
a secret. Mobile IP shared secret provisioning can be done 
through other means. In a preferred embodiment, when the 
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user subscribes to the voice and data service provider, the 
user will be informed of the IP address 244 of the HA in the 
voice and data service provider's network and the Mobile IP 
shared secret 243 assigned to him. This information may be 
accompanied with instructions how to enter this information s 
into the user's mobile device as part of the subscription 
setup. 

Home Agent (HA) and Foreign Agent (FA) are Mobile IP 
concepts and network elements introduced in RFC 2002. 
Their functionality and operation are described in detail in 
RFC 2002 and not detailed further herein. 

FIG. 3 shows the second step of call delivery in one 
embodiment of the present invention, wherein the user's 
mobile device 240 is roaming in a visited wireless network 
200, As the user powers on the mobile device 240, the 
mobile device registers with the visited wireless network 
200, which may be any type of wireless network including 
cellular or PCS. This registration permits the visited wireless 
network 200 to track the mobile's location and perform call 
delivery, but does not imply conventional VLR 220/HLR 
260 interaction. In the present invention, the roamer's HLR 
260 and the roamer 's AC 270 in the home wireless network 
250 are not contacted for call deliv6r)^ The registration 
conveys the mobile device's International Mobile Sub- 
scriber Identifier (IMS I), the forwarding phone number 242 
assigned by the voice and data service provider, and the IP 
address 244 of the HA to the visited MSC 210. 

With the roamer's IMSI, forwarding number 242, and HA 
IP address 244, the visited MSC 210 identifies the mobile 
device 240 as a special device supporting the present inven- 
tion. This special identification aborts the conventional 
VLR/HLR interaction. The visited MSC and the mobile 
device interact with each other to establish a temporary 
shared secret 245 using the Diffie-Hellman algorithm. This 
mechanism is also used in Cellular Digital Packet Data 
(CDPD) networks typically used for low speed packet data 
services. The user's credit card information is transmitted 
from the mobile device 240 to the visited wireless network 
200 via wireless communication with base stations 205 
using the established temporary shared secret 245. The 
shared secret 245 permits the sensitive information of the 
user's credit card information to be relayed to the visited 
wireless network 200 securely. 

The credit card information can be entered by the user on 45 
the mobile device keypad, or via a swipe of the card through 
a card reader slot on the mobile device, or via some other 
means. In one embodiment, the credit card information is 
optionally stored within the mobile device. In another 
embodiment, the credit card information must be entered by 
the user for each use. In another embodiment, the user 
selects a credit card number from a list to be used for the 
outgoing call. The credit card number may belong to the 
user, the user's employer, or another third party. The credit 
card number thus relayed securely is then verified by the 55 
visited, network's billing server to ensure it is vahd, using 
methods familiar to anyone exposed to credit card payments 
and transactions. 

After credit card verification, the visited MSC 210 con- 
tacts the visited H.323 server 211. The visited H.323 server 
211 also acts as a Mobile IP foreign agent (FA) which 
contacts the Home H.323 server 251 via the tIA IP address 
244. The Home H.323 server 251 provides Dynamic Host 
Configuration Protocol (DHCP) service resulting in a 
dynamic IP address 247. 65 

DHCP is covered by RFC 2131. As of the date of this 
disclosure, RFC 2131 may be obtained from URL http:// 



nic.mil/ftp/rfc/rfc2131.txt. The major use of DHCP is to 
support dynamic IP address assignment For example, an ISP 
(Internet Service Provider) can use DHCP to dynamically 
assign an IP address to a subscriber after he/she logs in over 
a dial-up connection; once the session is over, the IP address 
is recycled for other dial-in users. 

The dynamic IP address 247 from the Home H.323 server 
251 is relayed back to the FA of the visited H.323 server 211. 
The FA relays the dynamic IP address to the user's mobile 
device 240 during the IP Configuration Protocol (IPCP) 
phase of Point- to -Point Protocol (PPP) initialization. 

The mobile device initiates a Mobile IP registration 
request with the HA in the Home H.323 server 251 via the 
FA in the visited H.323 server 211, The HA authenticates the 
request using the Mobile IP shared secret 243 provisioned by 
the HA in the first step of the present invention, prior to the 
user roaming. Per the MD5 algorithm of Mobile IP, the 
Mobile IP registration request fi*om the mobile device is 
signed using the provisioned Mobile IP shared secret 243, 
which permits verification of both message content and 
sender by the HA A detailed technical discussion of the 
MD5 algorithm may be located in RFC 2002 which pertains 
to support of Mobile IP. Successful verification and receipt 
of an acknowledgement response by the mobile device from 
the HA completes the establishment of a Mobile IP tunnel 
285. 

Upon successful setup of the Mobile IP tunnel 285, the 
Home H,323 server 251 in the voice and data service 
provider's network 252 updates the HA mobility binding 
table 276 associated with Mobile IP and updates its phone- 
number-to-IP-address table 275 that maps the user's for- 
warding phone number 242 provided by the Home H.323 
server 251 to the dynamic IP address 247 now assigned to 
the user's mobile device 240, The visited H.323 server 211 
in the visited wireless network 200 similarly updates its 
IP-address-to-phone-number table 215 that maps the 
dynamic IP address 247 of the mobile to the forwarding 
phone number 242 provided by the Home H.323 server 251. 
When establishment of a Mobile IP tunnel 285 is complete, 
the HA mobihty binding table 276 is updated, and both 
H.323 servers'tables 215, 275 are updated, the setup for the 
GSM MoU and the PSTN bypass of the present invention is 
complete. 

The Mobile IP tunnel 285 is one example of bypassing the 
usual interaction between the VLR and the HLR/AC, as well 
as bypassing the PSTN, both as used in the present inven- 
tion. In a preferred embodiment, the Mobile IP tunnel is 
established within a public IP network such as the Internet. 
In alternate embodiments, the Mobile IP tunnel may be 
established within a private IP network, or a combination of 
both private networks and the pubhc Internet. In another 
embodiment, the Mobile IP tunnel may be layered on top of 
a different network infrastructure, in a manner consistent 
with current network practice. 

An IP tunnel is a specific case of a general network tunnel, 
which typically has two ends, and encapsulates packets of a 
first protocol for transmission from the first end to the 
second end of the tunnel using a potentially different second 
protocol for actual routing and dehvery. Setting up a net- 
work tunnel generally involves a server or agent setting up 
each end prior to use. IP tunneling allows Internet standard- 
based routers to route IP packets from one end of a tunnel 
to the other end of the tunnel, regardless of the topology of 
the underlying IP network. A detailed technical discussion of 
IP tunneling may be located in RFC 2002 which pertains to 
support of Mobile IP. 
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FIG. 4 shows the last step of call delivery in one embodi- 
ment of the present invention. An incoming call 257 to the 
user is forwarded by the home wireless network 250 to the 
forwarding phone nimiber 242 associated with the Home 
H.323 server 251. The Home H.323 server 251 looks up the 
phone number 242 in its phone -number-to -IP-addrcss table 
275 and finds the dynamic IP address 247 that has been 
assigned to the user's mobile device 240. 

The Home H.323 server 251 converts 283 the circuit call 
257 to a packet call (i.e., voice-over-IP) and forwards the 
packets to the HA. The HA forwards the packets over the 
Mobile IP tunnel 285 established in the second step to the FA 
in the visited H.323 server 211. 

The visited H.323 server 211 in the visited wireless 
network 200 looks up the dynamic IP address 247 in its 
IP-address-to-phone -number table 215 and finds the for- 
warding phone number 242 that has been assigned to the 
user's mobile device 240 for roaming. 

Ihe FA in the visited H.323 server 211 converts 287 the 
packets received via the Mobile IP tunnel 285 to a circuit call 
286 and relays the circuit call to the visited MSC 210. The 
visited MSC 210 forwards the circuit call 286 on to the 
wireless base stations 205 for over-the-air transmission to 
the user's mobile device 240. 

In a preferred embodiment, both the conversions 283, 287 
by H.323 servers 251, 211 are performed in each of the 
respective home and visited wireless provider's networks 
250, 200, thus supporting speaking and listening by both the 
calling and called party. Specifically, the Home H.323 server 
251 performs conversion 283 for circuit voice originating 
from a call 257 to be conveyed via the Mobile IP tunnel 285, 
and performs conversion 287 for voice packet data conveyed 
via Mobile IP tunnel 285 from the user to be delivered as 
circuit voice to caller 257. Similarly, the visited H.323 server 
211 performs conversion 283 for circuit voice originating 
from the wireless connection with the base stations 205 to be 
conveyed via the Mobile IP tunnel 285, and performs 
conversion 287 for voice packet data conveyed via Mobile 
EP tunnel 285 from the call 257 to be delivered via wireless 4^ 
communication from base stations 205 to the user's mobile 
device 240. In this embodiment, packet data is conveyed via 
the Mobile IP tunnel 285, and is converted appropriately to 
circuit calls by the H.323 servers 251, 211 at each end 
appropriately for interface to wireless (or in the case of the 45 
home wireless network 250, wireline) communications. 

When the call is terminated, billing information is col- 
lected in the visited network's billing server 290. The billing 
information may include but is not limited to at least one of 
the duration of the call, which credit card number was used, 
identification of the IP tunnel, time and date, and other kinds 
of billing data. At the end of a billing period, or when the 
accumulated bill amount exceeds some predetermined 
amount, or when additional services or processing fees may 
be imposed, or at some other preferential time, the visited 
network's billing server 290 interacts with the credit card's 
billing server 295 for billing settlement, using the traditional 
and well-understood practices for accoxmting for services 
rendered. In the present invention, the roamer's HLR 260 
and the roamer's AC 270 are not contacted for call delivery 
by the VLR 220. 

FIG. 5 illustrates a data structure supporting the 
IP-address-to-phone-number table 215 of the present inven- 
tion in the visited wireless network. The table 215 consists 
of associated pairs of entries, wherein each line in the table 
contains one IP address and one phone number. A selected 
IP address 510 is used to index within the list of IP addresses 
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520 in the table, thus selecting a particular record or line 
530. The corresponding phone number 540 in the line 530 is 
the data retrieved from the table 215. The IP address 510 is 
said to "map to" the forwarding phone number 540, uniquely 
from the list of phone numbers 550 in the table 215. 

FIG. 6 illiistrates data structures in the user's mobile 
device 240 required for the present invention. One of the 
data structures is the International Mobile Subscriber Iden- 
tifier (IMSI) 610 that uniquely identifies the user's mobile 
device. Provisioned into the mobile device by the voice and 
data service provider are the forwarding phone number 242, 
the Mobile IP shared secret 243, and the IP address 244 of 
the HA in the Home H323 server. In the second step of the 
present invention, the temporary shared secret 245 is estab- 
lished within the mobile device 240 to permit the sensitive 
information of the user's credit card information to be 
relayed to the visited network securely. Credit card infor- 
mation 620 may be stored within the user's mobile device, 
or it may be entered by the user as required. The leased 
dynamic IP address 247 is used to establish the second end 
of the Mobile IP turmel 285 as shown in FIG. 8. 

FIG. 7 illustrates a data structure supporting the phone - 
number-to-IP-address table 275 as shown in FIGS. 3 and 4 
of the present invention in the home wireless network. The 
table 275 consists of associated pairs of entries, wherein 
each line in the table contains one phone number and one IP 
address. A selected phone number 710 is used to index 
(within the list of phone numbers 720) in the table, thus 
selecting a particular record or line 730. The corresponding 
IP address 740 in the line 730 is the data retrieved from the 
table 275. The forwarding phone number 710 is said to "map 
to'* the IP address 740, uniquely from the list of IP addresses 
750 in the table 275. 

FIG. 8 illustrates the bypass function of the Mobile IP 
tunnel of the present invention. The home. MSC 253 in the 
home wireless network 250 relays the inbound call 257 to 
the Home H.323 server 251, which converts (283, 287) the 
call to packets that are conveyed via the IP tunnel 285. ITie 
packet data is converted (283, 287) back to circuit voice by 
the visited H.323 server 211 and conveyed to the visited 
MSC 210 for over the air transmission from the base stations 
205 to the mobile device 240. The normal interaction of the 
VLR and the HLR/AC is not used, effectively bypassing the 
network traditionally used for such interaction. The Public 
Switched Telephony Network (PSTN) as traditionally \ised 
to convey calls between wireless service providers (e.g., 
home wireless network 250 and visited wireless network 
200 of FIG. 4) is not used in the present invention, and is 
thus also effectively bypassed. As a result, this invention 
provides for call delivery to GSM subscribers who roam 
from their home GSM networks to CDMA networks, by 
using IP tunnels to convey the calls to be delivered. 

The present invention includes a method to bypass Global 
Systems for Mobile Communications (GSM) Memorandum 
of Understanding (MoU) to provide basic cellular call 
delivery service. The basic cellular call delivery service uses 
an Internet Protocol (IP) tunnel. The IP tunnel includes a first 
end and a second end, A user having a mobile device 
subscribes to a home wireless service provider, and that 
provider serves a home wireless network in which the user 
can place and receive cellular calls. When that user travels 
outside of their home wireless network, they are said to be 
roaming. 

When roaming, a user may be in an area served by a 
visited wireless service provider. The visited provider serves 
a visited wireless network distinct and separate from the 
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home wireless network. In the situation where there does not several tables are updated. These tables to be updated 

exist a pre-arranged GSM MoU between the home wireless include a phone-number- to-IP-address table in the home 

serviceprovider and the visited wireless service provider the H.323 server, a mobility binding table in the HA, and an 

usercanstillobtainbasiccalldelivery service if the user has IP-address-to-phonc-numbcr table in the visited H.323 
a payment means to pay for the basic visited wireless S server. 

network call delivery service. The method of the present invention to deliver calls to the 

A step in the preferred embodiment of the present method user's mobile device via the IP tunnel further includes 

of the invention has the user registering with a voice and converting a circuit call to packets by the home H.323 

data service provider. This registration establishes the first server. These packets are forwarded over the IP tunnel, 
end of the IP tunnel. This registration uses a home H.323 lO reassembled at the far end by the visited H323 server, and 

server in the voice and data service provider's network. The then converted back into a circuit call for transmission to the 

home H.323 server in the voice and data service provider's user's mobile device. The transmission occurs in the visited 

network is enhanced to further have the ability to provide wireless network. In a similar fashion to support bidirec- 

Home Agent (HA) service. tional communication typical of a telephone conversation, 

Another step in the preferred embodiment of the present the visited wireless network receives transmissions from the 

method of the invention identifies the user's payment means user's mobile device as a circuit call. This call is then 

to the visited wireless service provider. The typical payment converted to packets by the visited H.323 server. These 

means is a credit card, and the credit card information must packets are forwarded over the IP tunnel, reassembled at the 

be securely transmitted from the user to the visited wireless far end by the home H.323 server, and then converted back 

service provider. To securely transmit this information, the into a circuit call for eventual connection to the entity that 

mobile device and the visited wireless network establish a originally placed the call in the first place. 

Diffie-Hellman temporary shared secret With the secret in The method of the present invention to provide basic 

place, the user's credit card information can be transmitted cellular call delivery service for a user having a mobile 

securely to the visited wireless service provider, and upon device and subscribing to a home wireless service provider 
receipt the visited wireless service provider can verify the ^ serving a home wireless network is used when the user 

validity of the user's credit card information. roams to visit an area served by a visited wireless service 

Another step in the preferred embodiment of the present provider serving a visited wireless network distinct and 

method of the invention is to register with an H.323 server separate from the home wireless network. If the user has a 

in the visited wireless network. The H.323 server in the payment means to pay for the basic cellular call delivery 

visited wireless network further has the ability to provide service, the method includes establishing an Internet Pro to - 

Foreign Agent (FA) service. This registration permits the col (IP) tunnel, having a first end and a second end. This 

second end of the IP txmnel to be established to the user's tunnel is used for conveying IP packets in both directions 

mobile device. between the first end and die second end. 

Another step of the preferred embodiment of the present Calls are delivered to the user's mobile device via the IP 

method of the invention is to deliver calls to the user's tunnel. Billing information is collected from the visited 

mobile device, with the calls being conveyed as data via the wireless network by the visited wireless service provider, 

IP tunnel. As services are rendered to the user, billing The user is billed by the visited wireless service provider 

information is compiled and collected by the visited wireless responsive to the bilhng information collected and the user's 

service provider. The visited wireless service provider then identified payment means. Accordingly, the user's payment 

bills the user based on the billing information collected and means is identified to the visited wireless service provider, 

the user's credit card information. Setup of the IP tunnel is started by registering with the voice 

The credit card information for the user can be stored and data service provider to establish the first end of the IP 

within the mobile device by someone other than the user. tunnel at the HA within the voice and data service provider. 
Altematively, it can be entered by the user directly. In a 45 Then the user registers with the visited wireless service 

preferred embodiment, the credit card information is keyed provider to establish the second end of the IP tunnel at the 

into the mobile device. In another embodiment, the credit FA. 

card information can be scanned or swiped into the mobile The user's payment means may include credit card infor- 

device using a card reader or similar apparatus. mation. The step of identifying the user's payment means to 

The method of the present invention to estabhsh the first 50 the visited wireless service provider may include estabhsh- 

end of the IP tunnel includes setting up call forwarding in the ing a Diffie-Hellman temporary shared secret between the 

home wireless network to the voice and data service pro- user's mobile device and the visited wireless network. The 

vider. This may involve obtaining a telephone number for Diffie-Hellman temporary shared secret permits securely 

forwarding, and/or obtaining an IP address corresponding to transmitting the user's credit card information to the visited 
the Home Agent (HA). Additionally, a Mobile IP shared 55 wireless service provider via the visited wireless network, 

secret is set up with the voice and data service provider. The visited wireless service provider can then verify the 

The method of the present invention to register with the validity of the user's credit card information, 
visited wireless service provider to establish the second end Registering with the user's home wireless service pro- 
of the IP tunnel further includes obtaining a dynamic IP vider to establish the first end of the IP timnel within the 
address from the home H.323 server by the visited H.323 60 voice and data service provider's network may include 
server using DHCP, This dynamic IP address is then relayed setting up call forwarding in the home wireless network to 
from the visited H.323 server via the visited wireless net- the voice and data service provider's network. It may also 
work to the user's mobile device. The user's mobile device include obtaining a Mobile IP shared secret from the voice 
can authenticate the Mobile IP connection by using the and data service provider. Setting up call forwarding in the 
Mobile IP shared secret and the response from the HA of the 65 home wireless network may include obtaining a telephone 
home H.323 server. When complete and authenticated, the number for call forwarding from the voice and data service 
IP tunnel is established by the user's mobile device and then provider. It may also include providing a home H.323 server 
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by the voice and data service provider, and providing a 
Home Agent (HA) function within the home H.323 server. 
Generally, the user must obtain the IP address of the HA in 
the home H323 server in the voice and data service pro- 
vider's network. This address may be stored within the 
user's mobile device. 

The step of registering with the visited wireless service 
provider to estabhsh the second end of the IP tunnel may 
include providing a visited H,323 server in the visited 
wireless network. This visited H.323 server generally pro- 
vides a Foreign Agent (FA) function. Dyaamic Host Con- 
figuration Protocol (DHCP) in the voice and data service 
provider's network is used to obtain a dynamic IP address. 
The dynamic IP address is relayed from the HA via the 
visited wireless network to the user's mobile device. The 
user's mobile device authenticates the connection using the 
Mobile IP shared secret. Then the IP tunnel is established by 
the user's mobile device, and a number of tables are updated, 
including a phone-number-to-IP-address table in the home 
H.323 server, a mobility binding table in the HA, and an 
IP-address-to-phone-number table in the visited H.323 
server as previously disclosed. 

The system of the present invention provides basic cel- 
lular call delivery service via an Internet Protocol (IP) 
tunnel. The IP tunnel has a first end and a second end. A user 
having a mobile device and subscribing to a home wireless 
service provider serving a home wireless network can travel 
outside of the home wireless network. When the user is 
travelling within the boundaries of a visited wireless 
network, the user is said to be roaming. If there does not 
exist a pre-ananged Global Systems for Mobile Communi- 
cations (GSM) Memorandum of Understanding (MoU) 
between the home wireless service provider and a visited 
wireless service provider, the user can obtain basic call 
delivery service if that user has a means to pay for that 
service. 

The system of the present invention may include a pay- 
ment identification means for identifying the user's payment 
means to the visited wireless service provider. It also may 
include dehvery service means for providing basic cellular 
call dehvery service via the IP tunnel, responsive to the 
payment identification means. The delivery service means 
further may include a first end means to establish the first 
end of the IP tunnel within the home wireless network. The 
delivery service means further may include a second end 
means to establish the second end of the IP tunnel within the 
user's mobile device in the visited wireless network. The 
delivery service means further may include a circuit con- 
version means to convert circuit calls to the mobile device 
to packets for conveyance via the IP tunnel. The delivery 
service means further may include a packet conversion 
means to convert the packets conveyed by the IP tunnel to 
a circuit call. 

The system of the present invention may include a home 
H.323 server in the voice and data service provider's 
network, and a visited H.323 server in the visited wireless 
network. The home H.323 server may include a phone - 
number-to-lP-address table and a mobility binding table. 
The visited H.323 server may include an IP-address-to- 
phone -number table. The system may include means to 
update the above disclosed tables, and any others that may 
be necessary. 

The system of the present invention may include forward- 
ing means for setting up call forwarding from the home 
wireless network to a voice and data service provider's 
network. The forwarding means is typically responsive to 
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the user's mobile device. The system may also include 
mobile shared secret means for obtaining a Mobile IP shared 
secret fi:om the voice and data service provider. The mobile 
shared secret means is also typically responsive to the user's 

5 mobile device. Typically, a telephone number for call for- 
warding is provided by the voice and data service provider 
responsive to the user's mobile device. Also, the IP address 
of the HA in the home H.323 server in the voice and data 
service provider is provided to the user's mobile device. 

The system of the present invention may include DHCP 
means for obtaining a dynamic IP address from the home 
H.323 server. Typically, the dynamic IP address is relayed 
from the home H.323 server via the visited wireless network 
to the user's mobile device. The user's mobile device may 
then authenticate the connection by using the mobile shared 
secret means. Authenticating the connection permits an IP 
tunnel to be established. The system also monitors, collects, 
and compiles billing information in the visited wireless 
network for services rendered. This information can be used 
to bill the user's credit cards. 

20 The system of the present invention can use credit card 
information entered into the user's mobile device. Tbis 
information may be entered by other than the user. 
Alternatively, it can be keyed into the mobile device by the 
user for each use, or stored for a user selectable time period. 

25 Another way to enter the information is for the user to scan 
or swipe a credit card in an appropriate reader apparatus in 
the mobile device. The user's payment information can be 
relayed securely to the visited wireless service provider 
through the use of a DifHe-Hellman temporary shared secret. 

30 From the foregoing, it will be observed that numerous 
variations and modifications may be effected without depart- 
ing from the spirit and scope of the invention. It is to be 
understood that no Umitation with respect to the specific 
apparatus illustrated herein is intended or should be inferred. 
It is, of course, intended to cover by the appended claims all 
such modifications as fall within the scope of the claims. 
What is claimed is: 

1. A method to bypass Global Systems for Mobile Com- 
munications (GSM) Memorandum of Understanding (MoU) 
to provide basic cellular call delivery service via an Internet 
Protocol (IP) tunnel comprising a first end and a second end, 
for a user having a mobile device and subscribing to a home 
wireless service provider serving a home wireless network, 
wherein the user roams to visit an area served by a visited 
wireless service provider serving a visited wireless network 
distinct and separate from the home wireless network, 
wherein there does not exist a pre-arranged GSM MoU 
between the home wireless service provider and the visited 
wireless service provider, and wherein the user has a pay- 
ment means to pay for the basic cellular call delivery 
service, the method comprising: 

registering with a network of a voice and data service 
provider's network to establish the first end of the IP 
tunnel within a Home Agent (HA) in a home H.323 
55 server; 

identifying the user's payment means to the visited wire- 
less network; 

registering with a visited H.323 server comprising at least 
a Foreign Agent (FA) in the visited wireless network to 
60 establish the second end of the IP tunnel within the FA; 
and 

dehvering calls to the user's mobile device via the IP 
tunnel, 

wherein the step of registering with a voice and data service 
65 provider's network to estabhsh the first end of the IP tunnel 
within a Home Agent (HA) in a home H.323 server further 
comprises: 
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setting up call forwarding from the home wireless net- 
work to the voice and data service provider's network; 
and 

obtaining a Mobile IP shared secret from the voice and 
data service provider's network, 
wherein the step of setting up call forwarding frona the home 
wireless network to the voice and data service provider's 
network further comprises: 

obtaining a telephone number for call forwarding from the 

voice and data service provider; and 
obtaining the IP address of the HA in the home H.323 
server from the voice and data service provider, 
wherein the step of registering with a visited H.323 server in 
the visited wireless network to estabhsh the second end of 
the IP tunnel within the FA further comprises: 

obtaining a dynamic IP address from the home H.323 
server by the visited H.323 server using Dynamic Host 
Configuration Protocol (DHCP); 
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reassembling the forwarded packets into a reassembled 
circuit call by the visited H.323 server; and 

transmitting the reassembled circuit call over-the-air to 
the user's mobile device via the visited wireless net- 
work. 

8. The method as in claim 7, wherein the step of deliv- 
ering calls to the user's mobile device via the IP tunnel 
further comprises: 

receiving a response over-the-air from the user's mobile 

device by the visited wireless network; 
conversion of the response to packets by the visited H.323 

server; 

forwarding the packets via the established IP tunnel; and 
reassembling the forwarded packets into a reassembled 

circuit call response for delivery by the home H,323 

server. 

9. The method as in claim 8, wherein the user's payment 
means comprises credit card information and wherein the 



relaying the dynamic IP address from the home H.323 20 step of identifying the user's payment means to the visited 



server via the visited wireless network to the user's 
mobile device; 
authenticating the connection by the user's mobile device 

using the Mobile IP shared secret; and 
establishing the IP tunnel by the user's mobile device, 

2. The method as in claim 1, further comprising: 
collecting billing information from the visited wireless 

network by the visited wireless service provider; and 
billing the user by the visited wireless service provider 
responsive to the billing information collected and the 
user's identified payment means. 

3. The method as in claim 2, wherein the user's payment 
means comprises credit card information and wherein the 
step of identifying the user's payment means to the visited 
wireless network further comprises: 

establishing a DiflSe-Hellman temporary shared secret 
between the user's mobile device and the visited wire- 
less network; 

securely transmitting the user's credit card information to 
the visited wireless service provider via the visited 
wireless network using the temporary shared secret; 
and 

verifying the validity of the user's credit card information 
by the visited wireless networks 

4. ITie method as in claim 3, wherein the step of securely 
transmitting the user's credit card information further com- 
prises retrieving previously stored credit card information 
within the user's mobile device. 

5. The method as in claim 3, wherein the step of securely 
transmitting the user's credit card information further com- 
prises the user entering credit card information into the 
user's mobile device. 

6. The method as in claim 1, wherein the step of estab- 
lishing the IP tunnel further comprises: 

updating a phone-number-to-IP-address table in the home 
H323 server; 

updating a mobility binding table in the HA; and 

updating a IP-address-to -phone -number table in the vis- 
ited H.323 server. 

1. The method as in claim 1, wherein the step of deliv- 
ering calls to the user's mobile device via the IP tunnel 
further comprises: 

conversion of a circuit call for delivery to packets by the 
home H.323 server; 

forwarding the packets via the established IP tunnel; 
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wireless network further comprises: 

establishing a Diffie-Hellman temporary shared secret 
between the user's mobile device and the visited wire- 
less network; 

securely transmitting the user's credit card information to 
the visited wireless service provider via the visited 
wireless network using the temporary shared secret; 
and 

verifying the validity of the user's credit card information 
by the visited wireless network. 

10. The method as in claim 9, wherein the step of securely 
transmitting the user's credit card information further com- 
prises retrieving previously stored credit card information 
within the user's mobile device. 

11. The method as in claim 9, wherein the step of securely 
transmitting the xiser's credit card information further com- 
prises the user entering credit card information into the 
user's mobile device. 

12. A method to provide basic cellular call delivery 
service for a user having a mobile device and subscribing to 
a home wireless service provider serving a home wireless 
network, wherein the user roams to visit an area served by 
a visited wireless service provider serving a visited wireless 
network distinct and separate from the home wireless 
network, and wherein the user has a payment means to pay 
for the basic cellular call delivery service, the method 
comprising: 

establishing an Internet Protocol (IP) tunnel, having a first 
end and a second end, for conveying IP packets in both 
directions between the first end and the second end; 

delivering calls to the user's mobile device via the IP 
tunnel; 

coUectiug billing information from the visited wireless 
network by the visited wireless service provider; and 

billing the user by the visited wireless service provider 
responsive to the billing information collected and the 
user's identified payment means; 
wherein the step of establishing the IP mnnel further com- 
prises the method: 

registering with a voice and data service provider's net- 
work to establish the first end of the IP tunnel; 

identifying the user's payment means to the visited wire- 
less network; and 

registering with the visited wireless network to establish 
the second end of the IP tunnel, 



01/29/2004, EAST Version: 1.4.1 



us 6,526,033 Bl 



15 



16 



wherein the step of registering with a voice and data service 
provider's network to establish the first end of the IP tunnel 
further comprises: 

setting up call forwarding from the home wireless net- 
work to the voice and data service provider's network; 
and 

obtaining a Mobile IP shared secret from the voice and 
data service provider, 
wherein the step of setting up call forwarding from the home 
wireless network to the voice and data service provider's 
network further comprises: 

obtaining a telephone number for call forwarding from the 

voice and data service provider; 
providing a home H.323 server in the voice and data 

service provider's network; 
providing a Home Agent (HA) function within the home 
H323 server; 

obtaining the IP address of the HA in the home H.323 
server; and 

storing the IP address of the HA in the user's mobile 
device, 

wherein the step of registering with the visited wireless 
network to establish the second end of the IP tunnel within 
the user's mobile device further comprises: 

providing a visited H.323 server in the visited wireless 
network; 

providing a Foreign Agent (FA) function within the 

visited H.323 server; 
obtaining a dynamic IP address from the HA by the FA 

using Dynamic Host Configuration Protocol (DHCP); 
relaying the dynamic IP address from the HA via the 

visited wireless network to the user's mobile device; 
authenticating the connection by the user's mobile device 

using the Mobile IP shared secret; and 
establishing the IP tunnel by the user's mobUe device. 

13. The method as in claim 12, wherein the step of 
establishing the IP tunnel further comprises: 

updating a phone-number- to -IP-address table in the home 40 

H.323 server; 
updating a mobility binding table in the HA; and 
updating a IP-address-to-phone-number table in the vis- 
ited H.323 server. 

14. The method as in claim 12, wherein the step of ^5 
delivering calls to the user's mobile device via the IP tunnel 
further comprises: 

conversion of a circuit call for delivery to packets by the 
home H.323 sender; 

forwarding the packets via the established IP tunnel; 

reassembling the forwarded packets into a reassembled 
circuit call by the visited H.323 server, and 

transmitting the reassembled circuit call over-the-air to 
the user's mobile device via the visited wireless net- 
work. 

15. The method as in claim 14, wherein the step of 
delivering calls to the user's mobile device via the IP tunnel 
further comprises: 

receiving a response over-the-air from the user's mobile 

device by the visited wireless network; 
conversion of the response to packets by the visited H.323 

server; 

forwarding the packets via the established IP tunnel; and 
reassembling the forwarded packets into a reassembled 

circuit call response for delivery by the home H.323 

server. 
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16. Asystem to provide basic cellular call delivery service 
via an Internet Protocol (IP) tunnel comprising a first end 
and a second end, for a user having a mobile device and 
subscribing to a home wireless service provider serving a 
home wirele&s network, wherein the user roams to visit an 
area served by a visited wireless service provider serving a 
visited wireless network distinct and separate from the home 
wireless network, wherein tliere does not exist a pre- 
arranged Global Systems for Mobile Communications 
(GSM) Memorandum of Understanding (MoU) between the 
home wireless service provider and the visited wireless 
service provider, and wherein the user has a payment means 
to pay for the basic cellular call delivery service, the system 
comprising: 

payment identification means for identifying the user's 

payment means to the visited wireless network; and 
delivery service means for providing basic wireless call 
delivery service via the IP tunnel, responsive to the 
payment identification means, wherein the delivery 
service means further comprises: 
first end means to establish the first end of the IP tuimel 

within a voice and data service provider's network; 
second end means to establish the second end of the IP 

tunnel within the visited wireless network; 
circuit conversion means to convert circuit calls to the 

mobile device to packets for transport via the IP 

tunnel; and 

packet conversion means to convert the packets conveyed 
by the IP timnel to a circuit call, 
wherein the delivery service means further comprises: 

a home H.323 server in the voice and data service 
provider's network, the home H.323 server further 
comprising at least a Home Agent (HA); 

a visited H.323 server in the visited wireless network, the 
visited H.323 server further comprising at least a For- 
eign Agent (FA); 

a phone-number-to-IP-address table in the home H.323 
server; 

a mobility binding table in the HA; and 

an IP-addrcss-to-phone-Qumber table in the visited H.323 

server, the system, further comprising: 

means to update the phone-number-to-IP-address table; 

means to update the mobility binding table; and 

means to update the IP-address-to-phone-number table. 

17. The system as in claim 16, wherein the first end means 
further comprises: 

forwarding means for setting up call forwarding from the 
home wireless network to the voice and data service 
provider's network responsive to the user's mobile 
device; and 

mobile shared secret means for obtaining a Mobile IP 
shared secret from the voice and data service provider 
responsive to the user's mobile device. 

18. Tlie system as in claim 17, wherein the forwarding 
means further comprises: 

forwarding number means for obtaining a telephone num- 
ber for call forwarding firom the home wireless network 
responsive to the user's mobile device; and 

IP means for obtaining the IP address of the HA in the 
home H.323 server in the voice and data service 
provider's network responsive to the user's mobile 
device. 

19. The system as in claim 18, wherein the second end 
means fiirther comprises: 

Dynamic Host Configuration Protocol (DHCP) means for 
obtaining a dynamic IP address from the home H323 
server responsive to the IP means; 
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relay means for relaying the dynamic IP address from the 

home H.323 server via the visited wireless network 

responsive to the user's mobile device; 
authentication means for authenticating the connection by 

the user^s mobile device responsive to the mobile 5 

shared secret means; and 
tunnel means for establishing the IP tunnel responsive to 

the first end means and the second end means. 

20. The system as in claim 16, further comprising 
collection means for collecting billing information from 

the visited wireless network by the visited wireless 
service provider responsive to the delivery service 
means; and 

billing means for billing the user by the visited wireless j5 
service provider responsive to the collection means and 
the payment identification means. 

21. The system as in claim 16, wherein the user's payment 
means further comprises credit card information, and 
wherein the payment identification means further comprises: 
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payment shared secret means for establishing a Diffie- 
Hellmaa temporary shared secret between the user's 
mobile device and the visited wireless network; 

secure transmission means for securely transmitting the 
user's credit card information to the visited wireless 
service provider via the visited wireless network 
responsive to the payment shared seaet means; and 

verification means for verifying the validity of the user's 
credit card information by the visited wireless network 
responsive to the secure transmission means. 

22, Tlie system as in claim 21, wherein the credit card 
information is stored within the user's mobile device. 

23, The system as in claim 21, wherein the user's mobile 
device further comprises data eatry means to enter the user's 
credit card information to the user's mobile device. 

24. The system as in claim 23, wherein the data entry 
means comprises a keypad. 

25. The system as in claim 23, wherein the data entry 
means comprises a card reader. 
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